[openstack-dev] Problem using Keystone split backend

Henry Nash henryn at linux.vnet.ibm.com
Fri Aug 9 07:21:50 UTC 2013


Yep, agreed, certainly my code....if you can provide as much info in the bug as possible, and I'll get straight on it.

Henry
On 9 Aug 2013, at 00:14, Adam Young wrote:

> On 08/08/2013 03:58 PM, Gaspareto, Otavio wrote:
>>  
>> Hi all,
>>  
>> I’m using the Keystone split backend code (H2) with both identity and assignment using SQL drivers. During the process of authentication thru Horizon, I’m getting the following error in the log:
>>  
>> Traceback (most recent call last):
>>   File "/usr/lib/python2.6/site-packages/keystone/common/wsgi.py", line 240, in __call__
>>     result = method(context, **params)
>>   File "/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line 80, in authenticate
>>     context, auth)
>>   File "/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line 257, in _authenticate_local
>>     user_id, tenant_id)
>>   File "/usr/lib/python2.6/site-packages/keystone/token/controllers.py", line 371, in _get_project_roles_and_ref
>>     user_id, tenant_id)
>>   File "/usr/lib/python2.6/site-packages/keystone/identity/core.py", line 123, in get_roles_for_user_and_project
>>     user_id, tenant_id)
>>   File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py", line 125, in get_roles_for_user_and_project
>>     user_role_list = _get_user_project_roles(user_id, project_ref)
>>   File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py", line 107, in _get_user_project_roles
>>     metadata_ref.get('roles', {}), False)
>>   File "/usr/lib/python2.6/site-packages/keystone/common/manager.py", line 44, in _wrapper
>>     return f(*args, **kw)
>>   File "/usr/lib/python2.6/site-packages/keystone/assignment/core.py", line 216, in _roles_from_role_dicts
>>     if ((not d.get('inherited_to') and not inherited) or
> 
> 
> This looks like a bug, and, if I guess correctly, Henry Nash's inheritance change is to blame.
> 
> commit 7f4891ddc3da7457df09c0cc8bbfe8a888063feb
> " Implement role assignment inheritance (OS-INHERIT extension)"
> 
> Please file it in Launchpad,
>  
> 
> There are known issues with Unicode and LDAP, and I suspect you are tripping over that. 
> 
> 
>> AttributeError: 'unicode' object has no attribute 'get'
>>  
>>  
>> I’m using a fresh tenant/role/user that were created using the V2.0. Has anybody faced this problem too?
>>  
>> Thanks.
>> 
>> 
>> _______________________________________________
>> OpenStack-dev mailing list
>> OpenStack-dev at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130809/a81c0ff8/attachment.html>


More information about the OpenStack-dev mailing list